22 ms·
France says non to Office 365 and Google Workspace in school
- gniv 4y agoOnly the free versions are banned. Discussed extensively a couple weeks ago: https://news.ycombinator.com/item?id=33686599 https://news.ycombinator.com/item?id=33686599
- xrayarx 4y agoFrom the article: This applies to other free offerings like Google Workspace for Education. Paid versions of these cloud services might be an option if they hadn't already been disallowed based on worries about data safety. Generally speaking current law in the EU does not allow the use of US cloud services. That’s the basic outcome of the cited Schrems 2 ruling. The various entities that use cloud services either cease to use them or get around the ruling by making their users agree to their data being processed in the US.
- Stranger43 4y agoAnd there is people working on challenging the legality of different ways they "make" their users agree to storing data in countries that does not meet the EU's standard for "privacy protection". Currently we haven't had a clear ruling but at one point there might be a Schrems 3 ruling disallowing any accept by click-wrap license.
- gobip 4y agoSee you in one year when Microsoft will give a big chèque to the french government. It happens every few years.
- toastal 4y agoWhile I see this is a good, I wish it wasn't just about how/where the data is stored. I would love to see a bigger push against teaching children on proprietary software in general over free software+generic skills.
- xbmcuser 4y agoWorldwide billions are spent by public education systems of different countries on microsoft office entrenching their future workforce into using microsoft products. Google was actually able to break microsoft cycle over the last decade but it is one proprietary system over another.
- plastiquebeech 4y agoAnd before that, Apple got a generation hooked on iMacs by making the colorful pear-shaped all-in-one CRT computers the standard in every school. Education is a prime target for rent-seekers for two reasons. First, you can use the same product and marketing on thousands of schools. Second, your marks are young and impressionable.
- universa1 4y agoThere is a similar push in Germany, not limited to schools, but the workplace in general [1], initiated by the "Landesdatenschutzbeauftragter". [1] german only: https://www.golem.de/news/bedenken-zu-microsoft-365-datenschuetzer-will-mit-wirtschaft-ueber-office-software-reden-2212-170239.html https://www.golem.de/news/bedenken-zu-microsoft-365-datensch...
- Semaphor 4y agoThat’s Thuringia-specific, though. "Landes" means "state", not federal.
- softlayer 4y agoThe regional council of Reunion (French Overseas Region) has set up a few years ago a plan so that each high school student get a laptop running Ubuntu. It made me discover Linux, and it's partly thanks to that that I work in IT today.
- ThePhysicist 4y agoHonestly, on the right hardware Linux runs so much better than Windows. Whenever I need to open Windows I'm appalled at how laggy the whole UI is even when running it on latest-gen hardware. KDE, on the other hand, is super snappy and one of the best-looking desktop systems IMHO.
- nicolaslem 4y agoThe worst part is by far Windows Update. As a regular Debian and Arch user, where updates take seconds to install, running Windows Update is like watching paint dry.
- npteljes 4y agoEspecially the part where it's "looking for updates"! Sometimes lasts for minutes. What the hell. I wonder what's there to look for?
- mschuster91 4y agoLargely, that boils down to Windows never really having had a package manager like Linux distributions had, and not really an equivalent to the concept of "a file belongs to exactly one modular, versioned package". As a consequence, Windows has to check all of the files under its management if they are still the same as in the original installation or if they got touched by one of the dozens of Windows Update packages somewhen along the path, and if yes by which update package, and what that means for the compatibility between updates, and what effects that has in turn on the update installation order. Then it has to check for each potential update candidate if there is a localized version available, do a final check again if it actually can apply each update because some of these have conditional checks... oh, and some of the updates depend on Windows components being installed, so this has to be checked as well, oh and then it needs to trawl through the hot mess that is the database of drivers installed on the system and the hardware it has encountered, and to check if there are updates available for that. And at least the last time I looked (Win7 era) it also was possible to integrate MS Office and Visual Studio updates into the MS Update process, not sure if that's still the case today, but back then that also added to the discovery process. Windows is a hot mess of a lot of legacy garbage. Some of it got cleaned up a bit (e.g. refactoring stuff into components), but it's still nowhere near what almost all flavors of Linux sans buildroot offer.
- college_physics 4y agothe rational, socially optimal approach would be to have open source, standards based, self-sovereign platforms built around organizations like [0]. Private enterprize would have to compete on providing value-adding tools within these platforms, with access to user data monitored and strictly limited on a need-to-know basis. [0] https://www.documentfoundation.org/ https://www.documentfoundation.org/
- 01acheru 4y ago> Microsoft also plans to deploy its EU Data Boundary, though which EU customer data can be processed in compliance with data regulations, by the end of 2022. IMHO that's the root of the problem. Why does MSFT need to process customer data? Yeah, we all know why, but I'm really getting tired of this shit! It's not a problem paying for your product but leave my data alone, it is mine and that's it! No searching for emails, no training AIs on my code, no scanning images for "child porn", no reading my documents for "national security", etc... all the customer data you need to process is my email to send me a payment receipt or the size of the data I've saved to see if I'm over quota or whatever on that line. And the same applies to all players in this field, not just MSFT who isn't even one of the worst offenders.
- ThePowerOfFuet 4y agoThis isn't some sort of nefarious "processing": re the GDPR, storage is a form of processing. So is deletion. And, as the processor, they are required to do as the controller (you) instructs.
- vincnetas 4y agoCan i instruct to "do not collect"? Or could they for example "do not collect" until i ask them to?
- marcosdumay 4y agoIt's a SaaS product. "Collecting" is how it does anything.
- dijit 4y ago> re the GDPR, storage is a form of processing. That's not true, which lawyer told you this? I'm honestly really tired of the FUD surrounding GDPR, it's not actually that complicated.
- guhidalg 4y agohttps://ec.europa.eu/info/law/law-topic/data-protection/reform/what-constitutes-data-processing_en https://ec.europa.eu/info/law/law-topic/data-protection/refo... Check YOUR FUD at the door please.
- mixcocam 4y agoWhat will be the replacement? libre office? In that case why not move everything to FOSS?
- Stranger43 4y agoIt probably depends on what they are doing. The problem is with the cloud integration not necessarily with the Microsoft part so if Microsoft wanted to they could sell an version of office to the school with the cloud functionally disabled or changed to point to an on-prem SharePoint installation but this is the smallest part of why school administrators like o365 and google apps. The problem is that when you look into the email/groupware market and particularly how to manage devices/accounts, something both o365 and google apps(with Chromebooks) offer as a part of the cloud subscription, so now your kind of dealing with implementing authentication, file hosting, email, chat and a whole lot of associated problems based on picking individual solutions for each part of the puzzle. What the regulators expect will happen is that smaller local companies will start selling integration services to the schools because that's how it worked when IT was introduced to the marketplace. But that market have been decimated over the last few decades so it's not obvious who in the local markets can still do it as the big vendors have been positioning their training offerings and best practice guides towards less locally controlled infrastructure.
- chiefalchemist 4y agoIf governments can collaborate to engineer and build airplanes for example, why can't they do the same for edu software? The economic benefits (of edu) and the number of people directly and indirectly affected has to be on the order of airplanes / airtravel.
- mschuster91 4y ago> If governments can collaborate to engineer and build airplanes for example, why can't they do the same for edu software? Airplanes are a good example on just how utterly bad this can become - we have a lot of issues there. Both the EU and US sued each other over unfair subsidies, both Boeing and Airbus have massive structural issues because they are also expected to distribute pork over election districts... At the core, the problem is anti-competition laws. Governments have enough firepower to simply muscle every free market competition to its knees - the private competitors would simply sue any too effective effort by the government away, and I cannot even claim that this would be without reason.
- footlose_3815 4y ago[dead]
- timwaagh 4y agoFrench being French. I suppose taxing French citizens even more than they already do is what they will end up doing.
- dontbenebby 4y agoGood, they both abuse their access.
- T3RMINATED 4y ago[dead]
- sylware 4y agoHeard the french citizen medical database runs on azure... I hope I am wrong, very wrong.
- dna_polymerase 4y agoPhasing out basic services because of GDPR will further set France back in all topics of information technology. Sure, there are flaws in the offerings of said providers, but the current alternatives just aren't there. And punishing every company that somehow collects data got the EU in this situation where there is no European company capable of delivering a product of the quality and polishing as Google or Microsoft are. The argument that every US hosted provider is by default incapable of meeting GDPR requirements is especially ridiculous when we consider that western intelligence services were found to heavily collaborate with mass surveillance by the NSA. This will result in basically raising two types of kids. The technically inclined that see through this charade and will go on to leverage their knowledge in any jurisdiction that they do not associate with french legacy IT. And on the other hand, those who will not and forever associate the French IT systems and government with archaic computer systems that are completely removed from their other experiences in the cyberspace.
- makeitdouble 4y agoAs time goes, I tend to believe keeping using Microsoft and Google’s offering until equivalent alternatives emerge will make it more difficult for these alternatives to rise. As a real world example, China wouldn’t have many of its mega corps if it was favoriting the established US equivalent until something rises to the same level. I hate to say this, but in this field, provided an entity has enough resources, protectionism basically works.
- tremon 4y agoLet's not conflate these product offerings with "basic services". The basic services are document editing and e-mail, which can be done locally or with a local provider respectively. The conversion to a SAAS product changes the product offering, but does not change the basic services that schools/businesses require.
- xigoi 4y ago> there is no European company capable of delivering a product of the quality and polishing as Google or Microsoft are. Pretty much any other chat app is better quality than Microsoft Teams. And TeX, which is much better than Microsoft Office, was written by a single persnn.
- ChicagoBoy11 4y agoIs this a bit of a non-story? It says the "free" version of the services, which is an extremely sensible position to take. Would this preclude an institution from using a paid Workspace for Education account with their differentiated terms and guarantees?
- Stranger43 4y agoDepends on the terms and guarantees, and so far both o365 and especially google workspaces have been reluctant to offer proof that there is no way for the US headquarter to access data stored on Europeans citizens. MS had a German cloud region operated in a way that was designed to look independent of the US Headquarter but somehow that got rolled back into the global azure operations structure after a few years. And while there is talk about trying something similar again but nobody can tell if that will be accepted as separate enough or how long it will be before those boundaries are crossed anyway. For public funded institutions depending on any kind of user accept as a prereq for any service is extremely problematic so none of the workaround that have been used by businesses to bypass the lack of a valid "safe harbour agreement" so any solution put in place have to be designed in a way that don't require any "consent to data transfer"
- trackedemployee 4y agoWanted to share a story that could be related to MS Teams and monitoring, or may be I am just being paranoid and making connections to unrelated events. I am an h1b from India, working for one of those Indian contracting companies as a contractor to an US company. For my work, I use my employer provided laptop to remote login to client's Azure AVD remote desktop. ____ The incident: One day, I was talking to a colleague about the 100 year wait period for greencards through client's MS teams. I shared him some twitter links (where people say they would be 115 when they get greencard and such) through Whatsapp. While I was talking about it, Teams got disconnected. Didn't think anything about it, thought it was just a network issue. Same day, I was talking to another colleague, mentioned the same greencard thing, and shared the twitter links over Whatsapp. Again, MS teams got disconnected. I thought it was an odd coincidence that it got disconnected twice when I talked about this subject. Same day, at around 9.30 pm, I get an email from Twitter saying they blocked a suspicious login from a city in US. So, someone knew my user name & password. ____ Regarding how someone would know my Twitter username & password: While applying for US visa, we need to give our social media user names in the DS160 form, which my employer will also see. I have used this password else where, so some data breach may have leaked it. I don't know if one of the employees whom I talked to snitched me to my employer or my client was monitoring my Teams conversation (or Teams is looking for trigger words) and decided to investigate further where I am getting these info from Twitter. ____ This was the Twitter alert I got: Suspicious login alert There was an attempt to log in to your account @accountname that seems suspicious. Suspicious login Device: Unknown Location: Springfield, MA, USA When: date & time (11 minutes ago) *Location is approximate based on the login's IP address. If this was you - There is no need to take any action right now. Just to be safe, you'll need to answer some security questions the next time you login to this account. If this wasn't you - Change your password now to protect your account. You'll be logged out of all your active Twitter sessions except the one you're using this time.
- Rimintil 4y agoYes, there are roles that allow an admin or legal team to review all sorts of activity across M365. That’s not MSFT, though. In the US, you should never expect privacy on company owned devices or services. The company may even be decrypting SSL sessions, revealing passwords in the clear (though they shouldn’t…).
- O__________O 4y ago“non” in title is “nope” in English - no idea why it made sense to inject French into an English title.
- aero-glide2 4y agoBecause this is about French schools, mon ami.
- O__________O 4y agoSo anytime newspapers covers a store of a country where its native language is not English papers should be injecting random native language into the article?
- josefx 4y agoThe meaning is pretty much obvious, the context is France. Do you hate creativity or is there an actual reason behind your complaint?
- sbuk 4y agoIt's The Register. They style themselves after British tabloids. The headline is exactly what you expect from a red top[0] like The Sun[1] [0] https://en.wikipedia.org/wiki/Tabloid_journalism#Red_tops https://en.wikipedia.org/wiki/Tabloid_journalism#Red_tops [1] https://en.wikipedia.org/wiki/The_Sun_(United_Kingdom) https://en.wikipedia.org/wiki/The_Sun_(United_Kingdom)
- bastardoperator 4y agoBack to Word Perfect we go!
- jokoon 4y agoThis is the result of the us protectionism.
- deafpolygon 4y agoMore people should try and opt for libre software that does not do these things.